@linxin666/dsh-pet 0.3.2 → 0.3.3

package/lib/index.js

@@ -4241,7 +4241,7 @@ function makePetRoutes(deps) {
 //#region src/mount-once.ts
 /**
 * Host single-instance guard shared by the plugin family. The family bundle
-* (dsh-web-ui-all / dsh-skins) namespaces every child row id (web-ui-*), so
+* (dsh-web-all / dsh-skins) namespaces every child row id (web-ui-*), so
 * the loader accepts a standalone install of the same package side by side;
 * without this guard the second instance would still re-register the same
 * webserver routes, tools, settings namespaces, and system-prompt sections
@@ -4254,7 +4254,7 @@ function makePetRoutes(deps) {
 * `ctx.effect` runs its callback immediately and treats the callback's
 * return value as the fiber disposer, so the unmarker is returned, not run.
 */
-const MOUNTED = Symbol.for("dsh-web-ui.mounted-plugins");
+const MOUNTED = Symbol.for("dsh-web.mounted-plugins");
 function mountedSet() {
 	const registry = globalThis;
 	return registry[MOUNTED] ??= /* @__PURE__ */ new Set();

package/lib/types/client/index.d.ts

@@ -23,7 +23,7 @@ export type { PetDefinition } from '../registry.ts';
 declare module '@deepseek-ai/cordis' {
     interface Context {
         /**
-         * Optional rc.6 compatibility binder provided by dsh-web-ui-settings;
+         * Optional rc.6 compatibility binder provided by dsh-web-settings;
          * absent when that group plugin is not installed, so callers fall back to
          * the official settings scope.
          */

package/lib/types/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAwB,aAAa,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAA;AAgEnI,wEAAwE;AACxE,eAAO,MAAM,MAAM,UAA2E,CAAA;AAE9F,qEAAqE;AACrE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACxE,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AACrD,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC7D,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AACtF,YAAY,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AACpE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAEnD,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf;;;;WAIG;QACH,aAAa,CAAC,EAAE;YAAE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;SAAE,CAAA;KAC1E;CACF;AAED;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAoR9C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAwB,aAAa,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAA;AAiEnI,wEAAwE;AACxE,eAAO,MAAM,MAAM,UAA2E,CAAA;AAE9F,qEAAqE;AACrE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACxE,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AACrD,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC7D,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AACtF,YAAY,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AACpE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAEnD,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf;;;;WAIG;QACH,aAAa,CAAC,EAAE;YAAE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;SAAE,CAAA;KAC1E;CACF;AAED;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAwR9C"}

package/lib/types/client/index.js

@@ -19,6 +19,7 @@ import { live2dRenderer } from "./renderers/live2d.js";
 import { registerPetUiTeardown, takeoverPetUiTeardown } from "./ui-teardown.js";
 import { PetSettingsSection, PetSettingsCardController } from "./PetSettingsCard.js";
 import { NS, en, zh, t } from "./locales.js";
+import { reportDailyHeartbeat } from "./telemetry.js";
 /** Same-origin JSON fetch helper (GET without body, POST with JSON body). */
 async function petFetch(path, body) {
     const response = await fetch(path, body === undefined
@@ -56,6 +57,9 @@ export const inject = ['slots', 'locale', 'connection', 'settingsScope', 'remote
  * @param ctx - client root context.
  */
 export function apply(ctx) {
+    // Anonymous install heartbeat (docs/telemetry.md): one beat per browser per
+    // UTC day, package name only, silent failure.
+    reportDailyHeartbeat([{ name: '@linxin666/dsh-pet' }]);
     ctx.effect(() => {
         try {
             return ctx.locale.register(NS, { zh, en });

package/lib/types/client/settings-form.d.ts

@@ -173,7 +173,7 @@ export declare class CardForm<T> {
     /**
      * Write every staged edit, then re-seed from what the Host accepted.
      *
-     * When the scope carries the optional batch surface (the dsh-web-ui
+     * When the scope carries the optional batch surface (the dsh-web
      * bridge scope), every planned write rides one mutation so cross-field
      * validate hooks (baseURL+model) judge the batch as a unit instead of
      * deadlocking on per-field writes. Otherwise the per-field loop runs.

package/lib/types/client/settings-form.js

@@ -170,7 +170,7 @@ export class CardForm {
     /**
      * Write every staged edit, then re-seed from what the Host accepted.
      *
-     * When the scope carries the optional batch surface (the dsh-web-ui
+     * When the scope carries the optional batch surface (the dsh-web
      * bridge scope), every planned write rides one mutation so cross-field
      * validate hooks (baseURL+model) judge the batch as a unit instead of
      * deadlocking on per-field writes. Otherwise the per-field loop runs.

package/lib/types/client/telemetry.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Anonymous install telemetry shared by the DSH Web UI family plugins.
+ *
+ * Once per UTC day per browser, each wired plugin sends one heartbeat to
+ * the dsh-market edge API listing its package name (and version when known).
+ * The payload carries no conversation data and no identifiers beyond a random
+ * UUID generated in localStorage; the server hashes it with a deployment salt
+ * before storage and never persists IP addresses. Sends are fire-and-forget:
+ * failures stay silent and simply retry on a later mount or day. The system
+ * is documented in docs/telemetry.md.
+ */
+export type TelemetryChannel = 'market' | 'npm' | 'unknown';
+export interface TelemetryItem {
+    /** npm package name or asset id, e.g. "@linxin666/dsh-pet" or "skin:harbor". */
+    name: string;
+    /** Installed version when known; omitted otherwise. */
+    version?: string;
+    /** Install channel when determinable (market = Workshop install). */
+    channel?: TelemetryChannel;
+}
+/**
+ * Fire the daily heartbeat for the given items at most once per UTC day per
+ * browser. Never throws and never blocks the caller. Items without an explicit
+ * version inherit the bundle's baked build version.
+ */
+export declare function reportDailyHeartbeat(items: readonly TelemetryItem[]): void;
+//# sourceMappingURL=telemetry.d.ts.map

package/lib/types/client/telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../../src/client/telemetry.ts"],"names":[],"mappings":"AACA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAA;AAE3D,MAAM,WAAW,aAAa;IAC5B,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAA;IACZ,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,qEAAqE;IACrE,OAAO,CAAC,EAAE,gBAAgB,CAAA;CAC3B;AA+CD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,GAAG,IAAI,CA8B1E"}

package/lib/types/client/telemetry.js

@@ -0,0 +1,97 @@
+// Generated by scripts/sync-shared.mjs from shared/client/telemetry.ts. Do not edit this copy; edit the shared source and run "node scripts/sync-shared.mjs".
+/**
+ * Anonymous install telemetry shared by the DSH Web UI family plugins.
+ *
+ * Once per UTC day per browser, each wired plugin sends one heartbeat to
+ * the dsh-market edge API listing its package name (and version when known).
+ * The payload carries no conversation data and no identifiers beyond a random
+ * UUID generated in localStorage; the server hashes it with a deployment salt
+ * before storage and never persists IP addresses. Sends are fire-and-forget:
+ * failures stay silent and simply retry on a later mount or day. The system
+ * is documented in docs/telemetry.md.
+ */
+const VISITOR_KEY = 'dsh-web-ui-telemetry-visitor';
+const DAY_KEY_PREFIX = 'dsh-web-ui-telemetry-day:';
+const ENDPOINT = 'https://dsh-market.com/api/telemetry/event';
+/** The building package's version, when the bundle carries it. */
+function bakedVersion() {
+    try {
+        return typeof __DSH_PKG_VERSION__ === 'string' && __DSH_PKG_VERSION__ !== ''
+            ? __DSH_PKG_VERSION__
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Read or lazily create the anonymous visitor id; null when storage is unavailable. */
+function visitorId() {
+    try {
+        const existing = localStorage.getItem(VISITOR_KEY);
+        if (existing && /^[A-Za-z0-9_-]{16,64}$/.test(existing))
+            return existing;
+        const fresh = crypto.randomUUID().replaceAll('-', '');
+        localStorage.setItem(VISITOR_KEY, fresh);
+        return fresh;
+    }
+    catch {
+        // Storage unavailable (privacy mode, sandboxed frame): report nothing.
+        return null;
+    }
+}
+/** Drop stale per-day dedup keys so localStorage does not grow forever. */
+function pruneDayKeys(today) {
+    try {
+        for (let index = localStorage.length - 1; index >= 0; index -= 1) {
+            const key = localStorage.key(index);
+            if (key !== null && key.startsWith(DAY_KEY_PREFIX) && key !== DAY_KEY_PREFIX + today) {
+                localStorage.removeItem(key);
+            }
+        }
+    }
+    catch { /* best effort */ }
+}
+/**
+ * Fire the daily heartbeat for the given items at most once per UTC day per
+ * browser. Never throws and never blocks the caller. Items without an explicit
+ * version inherit the bundle's baked build version.
+ */
+export function reportDailyHeartbeat(items) {
+    try {
+        if (items.length === 0)
+            return;
+        const today = new Date().toISOString().slice(0, 10);
+        // Automation contexts (CDP-driven QA browsers, fresh isolated profiles)
+        // mint a new visitor id per run and would inflate instance counts.
+        if (navigator.webdriver)
+            return;
+        if (localStorage.getItem(DAY_KEY_PREFIX + today) !== null)
+            return;
+        const visitor = visitorId();
+        if (visitor === null)
+            return;
+        pruneDayKeys(today);
+        const payloadItems = items.map((item) => {
+            const out = { name: item.name };
+            const version = item.version ?? bakedVersion();
+            if (version !== undefined)
+                out.version = version;
+            if (item.channel !== undefined)
+                out.channel = item.channel;
+            return out;
+        });
+        const body = JSON.stringify({ kind: 'heartbeat', visitor, items: payloadItems });
+        void fetch(ENDPOINT, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body,
+            keepalive: true,
+        }).then((response) => {
+            // Mark the day only after an accepted send, so offline browsers retry
+            // on a later mount instead of going dark until tomorrow.
+            if (response.ok)
+                localStorage.setItem(DAY_KEY_PREFIX + today, '1');
+        }).catch(() => { });
+    }
+    catch { /* never break the host UI over telemetry */ }
+}

package/lib/types/http.d.ts

@@ -10,7 +10,7 @@
  * edit this shared source and re-run the sync instead of editing a copy.
  * Consumer code is migrated onto it in follow-up waves; no call site changes
  * belong in the same change as its introduction.
- * @module dsh-web-ui-shared/host/http
+ * @module dsh-web-shared/host/http
  */
 import type { IncomingMessage, OutgoingHttpHeaders, ServerResponse } from 'node:http';
 /**

package/lib/types/http.js

@@ -11,7 +11,7 @@
  * edit this shared source and re-run the sync instead of editing a copy.
  * Consumer code is migrated onto it in follow-up waves; no call site changes
  * belong in the same change as its introduction.
- * @module dsh-web-ui-shared/host/http
+ * @module dsh-web-shared/host/http
  */
 /** Default body cap for readJsonBody: 64 KiB. */
 const DEFAULT_JSON_BODY_MAX_BYTES = 64 * 1024;

package/lib/types/index.d.ts

@@ -6,7 +6,7 @@
  * the package assets, the hatch-pet custom pets directory, and composed
  * config entries; adding a pet means dropping a manifest + atlas into one of
  * those sources, never touching host or client code. Install via
- * 'dsh plugin --profile web add link:<dsh-web-ui>/packages/dsh-pet'; the
+ * 'dsh plugin --profile web add link:<dsh-web>/packages/dsh-pet'; the
  * cordis.patch.yml inserts this plugin row.
  * @module @linxin666/dsh-pet
  */

package/lib/types/index.js

@@ -6,7 +6,7 @@
  * the package assets, the hatch-pet custom pets directory, and composed
  * config entries; adding a pet means dropping a manifest + atlas into one of
  * those sources, never touching host or client code. Install via
- * 'dsh plugin --profile web add link:<dsh-web-ui>/packages/dsh-pet'; the
+ * 'dsh plugin --profile web add link:<dsh-web>/packages/dsh-pet'; the
  * cordis.patch.yml inserts this plugin row.
  * @module @linxin666/dsh-pet
  */

package/lib/types/loopback.d.ts

@@ -7,7 +7,7 @@
  * Semantics: RFC 5735 IPv4 127/8, ::1, IPv4-mapped ::ffff:127/8 (matching the
  * remote-web-ui gate), localhost hostnames, plus the browser same-origin
  * markers (sec-fetch-site and Origin) for the request-level fence.
- * @module dsh-web-ui-shared/host/loopback
+ * @module dsh-web-shared/host/loopback
  */
 import type { IncomingMessage } from 'node:http';
 /** IPv4 127/8 predicate (four decimal octets, first == 127). */

package/lib/types/loopback.js

@@ -8,7 +8,7 @@
  * Semantics: RFC 5735 IPv4 127/8, ::1, IPv4-mapped ::ffff:127/8 (matching the
  * remote-web-ui gate), localhost hostnames, plus the browser same-origin
  * markers (sec-fetch-site and Origin) for the request-level fence.
- * @module dsh-web-ui-shared/host/loopback
+ * @module dsh-web-shared/host/loopback
  */
 /** IPv4 127/8 predicate (four decimal octets, first == 127). */
 export function isIPv4Loopback(v4) {

package/lib/types/mount-once.d.ts

@@ -1,6 +1,6 @@
 /**
  * Host single-instance guard shared by the plugin family. The family bundle
- * (dsh-web-ui-all / dsh-skins) namespaces every child row id (web-ui-*), so
+ * (dsh-web-all / dsh-skins) namespaces every child row id (web-ui-*), so
  * the loader accepts a standalone install of the same package side by side;
  * without this guard the second instance would still re-register the same
  * webserver routes, tools, settings namespaces, and system-prompt sections

package/lib/types/mount-once.js

@@ -1,7 +1,7 @@
 // Generated by scripts/sync-shared.mjs from shared/host/mount-once.ts. Do not edit this copy; edit the shared source and run "node scripts/sync-shared.mjs".
 /**
  * Host single-instance guard shared by the plugin family. The family bundle
- * (dsh-web-ui-all / dsh-skins) namespaces every child row id (web-ui-*), so
+ * (dsh-web-all / dsh-skins) namespaces every child row id (web-ui-*), so
  * the loader accepts a standalone install of the same package side by side;
  * without this guard the second instance would still re-register the same
  * webserver routes, tools, settings namespaces, and system-prompt sections
@@ -14,7 +14,7 @@
  * `ctx.effect` runs its callback immediately and treats the callback's
  * return value as the fiber disposer, so the unmarker is returned, not run.
  */
-const MOUNTED = Symbol.for('dsh-web-ui.mounted-plugins');
+const MOUNTED = Symbol.for('dsh-web.mounted-plugins');
 function mountedSet() {
     const registry = globalThis;
     return (registry[MOUNTED] ??= new Set());

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@linxin666/dsh-pet",
   "description": "Multi-pet companion plugin for the dsh web GUI: a registry-driven floating pet that reacts to model activity, with per-pet naming, petting/feeding interactions and an affinity score",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "type": "module",
   "engines": {
     "node": "^22.19.0 || >=24.0.0"
@@ -87,7 +87,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/zhu1090093659/dsh-web-ui.git"
+    "url": "https://github.com/zhu1090093659/dsh-web.git"
   },
   "scripts": {
     "build": "tsc -b && tsdown",

package/src/client/index.ts

@@ -31,6 +31,7 @@ import { live2dRenderer } from './renderers/live2d.ts'
 import { registerPetUiTeardown, takeoverPetUiTeardown } from './ui-teardown.ts'
 import { PetSettingsSection, PetSettingsCardController, type PetSettings } from './PetSettingsCard.tsx'
 import { NS, en, zh, t } from './locales.ts'
+import { reportDailyHeartbeat } from './telemetry.ts'
 
 /** The host pet API as the browser sees it (same-origin JSON endpoints). */
 interface PetHttpApi {
@@ -89,7 +90,7 @@ export type { PetDefinition } from '../registry.ts'
 declare module '@deepseek-ai/cordis' {
   interface Context {
     /**
-     * Optional rc.6 compatibility binder provided by dsh-web-ui-settings;
+     * Optional rc.6 compatibility binder provided by dsh-web-settings;
      * absent when that group plugin is not installed, so callers fall back to
      * the official settings scope.
      */
@@ -104,6 +105,10 @@ declare module '@deepseek-ai/cordis' {
  * @param ctx - client root context.
  */
 export function apply(ctx: ClientContext): void {
+  // Anonymous install heartbeat (docs/telemetry.md): one beat per browser per
+  // UTC day, package name only, silent failure.
+  reportDailyHeartbeat([{ name: '@linxin666/dsh-pet' }])
+
   ctx.effect(() => {
     try {
       return ctx.locale.register(NS, { zh, en })

package/src/client/settings-form.ts

@@ -320,7 +320,7 @@ export class CardForm<T> {
   /**
    * Write every staged edit, then re-seed from what the Host accepted.
    *
-   * When the scope carries the optional batch surface (the dsh-web-ui
+   * When the scope carries the optional batch surface (the dsh-web
    * bridge scope), every planned write rides one mutation so cross-field
    * validate hooks (baseURL+model) judge the batch as a unit instead of
    * deadlocking on per-field writes. Otherwise the per-field loop runs.

package/src/client/telemetry.ts

@@ -0,0 +1,105 @@
+// Generated by scripts/sync-shared.mjs from shared/client/telemetry.ts. Do not edit this copy; edit the shared source and run "node scripts/sync-shared.mjs".
+/**
+ * Anonymous install telemetry shared by the DSH Web UI family plugins.
+ *
+ * Once per UTC day per browser, each wired plugin sends one heartbeat to
+ * the dsh-market edge API listing its package name (and version when known).
+ * The payload carries no conversation data and no identifiers beyond a random
+ * UUID generated in localStorage; the server hashes it with a deployment salt
+ * before storage and never persists IP addresses. Sends are fire-and-forget:
+ * failures stay silent and simply retry on a later mount or day. The system
+ * is documented in docs/telemetry.md.
+ */
+
+export type TelemetryChannel = 'market' | 'npm' | 'unknown'
+
+export interface TelemetryItem {
+  /** npm package name or asset id, e.g. "@linxin666/dsh-pet" or "skin:harbor". */
+  name: string
+  /** Installed version when known; omitted otherwise. */
+  version?: string
+  /** Install channel when determinable (market = Workshop install). */
+  channel?: TelemetryChannel
+}
+
+const VISITOR_KEY = 'dsh-web-ui-telemetry-visitor'
+const DAY_KEY_PREFIX = 'dsh-web-ui-telemetry-day:'
+const ENDPOINT = 'https://dsh-market.com/api/telemetry/event'
+
+// Baked into each client bundle by shared/tsdown.client.ts (the package's own
+// package.json version at build time). Undefined in dev/test builds.
+declare const __DSH_PKG_VERSION__: string | undefined
+
+/** The building package's version, when the bundle carries it. */
+function bakedVersion(): string | undefined {
+  try {
+    return typeof __DSH_PKG_VERSION__ === 'string' && __DSH_PKG_VERSION__ !== ''
+      ? __DSH_PKG_VERSION__
+      : undefined
+  } catch {
+    return undefined
+  }
+}
+
+/** Read or lazily create the anonymous visitor id; null when storage is unavailable. */
+function visitorId(): string | null {
+  try {
+    const existing = localStorage.getItem(VISITOR_KEY)
+    if (existing && /^[A-Za-z0-9_-]{16,64}$/.test(existing)) return existing
+    const fresh = crypto.randomUUID().replaceAll('-', '')
+    localStorage.setItem(VISITOR_KEY, fresh)
+    return fresh
+  } catch {
+    // Storage unavailable (privacy mode, sandboxed frame): report nothing.
+    return null
+  }
+}
+
+/** Drop stale per-day dedup keys so localStorage does not grow forever. */
+function pruneDayKeys(today: string): void {
+  try {
+    for (let index = localStorage.length - 1; index >= 0; index -= 1) {
+      const key = localStorage.key(index)
+      if (key !== null && key.startsWith(DAY_KEY_PREFIX) && key !== DAY_KEY_PREFIX + today) {
+        localStorage.removeItem(key)
+      }
+    }
+  } catch { /* best effort */ }
+}
+
+/**
+ * Fire the daily heartbeat for the given items at most once per UTC day per
+ * browser. Never throws and never blocks the caller. Items without an explicit
+ * version inherit the bundle's baked build version.
+ */
+export function reportDailyHeartbeat(items: readonly TelemetryItem[]): void {
+  try {
+    if (items.length === 0) return
+    const today = new Date().toISOString().slice(0, 10)
+    // Automation contexts (CDP-driven QA browsers, fresh isolated profiles)
+    // mint a new visitor id per run and would inflate instance counts.
+    if (navigator.webdriver) return
+    if (localStorage.getItem(DAY_KEY_PREFIX + today) !== null) return
+    const visitor = visitorId()
+    if (visitor === null) return
+    pruneDayKeys(today)
+    const payloadItems = items.map((item) => {
+      const out: Record<string, string> = { name: item.name }
+      const version = item.version ?? bakedVersion()
+      if (version !== undefined) out.version = version
+      if (item.channel !== undefined) out.channel = item.channel
+      return out
+    })
+    const body = JSON.stringify({ kind: 'heartbeat', visitor, items: payloadItems })
+    void fetch(ENDPOINT, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body,
+      keepalive: true,
+    }).then((response) => {
+      // Mark the day only after an accepted send, so offline browsers retry
+      // on a later mount instead of going dark until tomorrow.
+      if (response.ok) localStorage.setItem(DAY_KEY_PREFIX + today, '1')
+    }).catch(() => { /* unreachable endpoint: stay silent */ })
+  } catch { /* never break the host UI over telemetry */ }
+}

package/src/http.ts

@@ -11,7 +11,7 @@
  * edit this shared source and re-run the sync instead of editing a copy.
  * Consumer code is migrated onto it in follow-up waves; no call site changes
  * belong in the same change as its introduction.
- * @module dsh-web-ui-shared/host/http
+ * @module dsh-web-shared/host/http
  */
 
 import type { IncomingMessage, OutgoingHttpHeaders, ServerResponse } from 'node:http'

package/src/index.ts

@@ -6,7 +6,7 @@
  * the package assets, the hatch-pet custom pets directory, and composed
  * config entries; adding a pet means dropping a manifest + atlas into one of
  * those sources, never touching host or client code. Install via
- * 'dsh plugin --profile web add link:<dsh-web-ui>/packages/dsh-pet'; the
+ * 'dsh plugin --profile web add link:<dsh-web>/packages/dsh-pet'; the
  * cordis.patch.yml inserts this plugin row.
  * @module @linxin666/dsh-pet
  */

package/src/loopback.ts

@@ -8,7 +8,7 @@
  * Semantics: RFC 5735 IPv4 127/8, ::1, IPv4-mapped ::ffff:127/8 (matching the
  * remote-web-ui gate), localhost hostnames, plus the browser same-origin
  * markers (sec-fetch-site and Origin) for the request-level fence.
- * @module dsh-web-ui-shared/host/loopback
+ * @module dsh-web-shared/host/loopback
  */
 
 import type { IncomingMessage } from 'node:http'

package/src/mount-once.ts

@@ -1,7 +1,7 @@
 // Generated by scripts/sync-shared.mjs from shared/host/mount-once.ts. Do not edit this copy; edit the shared source and run "node scripts/sync-shared.mjs".
 /**
  * Host single-instance guard shared by the plugin family. The family bundle
- * (dsh-web-ui-all / dsh-skins) namespaces every child row id (web-ui-*), so
+ * (dsh-web-all / dsh-skins) namespaces every child row id (web-ui-*), so
  * the loader accepts a standalone install of the same package side by side;
  * without this guard the second instance would still re-register the same
  * webserver routes, tools, settings namespaces, and system-prompt sections
@@ -15,7 +15,7 @@
  * return value as the fiber disposer, so the unmarker is returned, not run.
  */
 
-const MOUNTED = Symbol.for('dsh-web-ui.mounted-plugins')
+const MOUNTED = Symbol.for('dsh-web.mounted-plugins')
 
 interface MountRegistry {
   [MOUNTED]?: Set<string>